Sails.JS: Harnessing the Power of Both HTTP and HTTPS

Question

Sails.JS: Harnessing the Power of Both HTTP and HTTPS

I am currently exploring the process of setting up a sails app that can handle both HTTP and HTTPS requests. To achieve this, I followed the steps outlined in the blog post available here:

 var fs = require('fs');

module.exports = {

  port: process.env.PORT || 1337,
  environment: process.env.NODE_ENV || 'development',

  express: { serverOptions : {
    key: fs.readFileSync('ssl/key.pem'),
    cert: fs.readFileSync('ssl/cert.pem')
  }}

};

However, I encountered an issue where the configuration only allowed the server to respond to HTTPS requests. I am seeking advice or solutions from individuals who have successfully implemented a setup that caters to both HTTP and HTTPS without needing a separate HTTP-only server with redirects to port 443.

Any insights would be greatly appreciated.

javascript ssl express https sails.js

Answer 1

Answer №1

Update your local.js file or production.js file to include the path to your SSL Certificates.

    module.exports  = {
 ssl: {
     ca: require('fs').readFileSync(__dirname + '/ssl/ca.crt'),
     key: require('fs').readFileSync(__dirname + '/ssl/key.key'),
     cert: require('fs').readFileSync(__dirname + '/ssl/cert.crt')
   },
 port: 443
}

Include a policies section in your production environment configuration file.

    module.exports  = {
 ssl: {
     ca: require('fs').readFileSync(__dirname + '/ssl/ca.crt'),
     key: require('fs').readFileSync(__dirname + '/ssl/key.key'),
     cert: require('fs').readFileSync(__dirname + '/ssl/cert.crt')
   },
 port: 443,
 policies: {
    '*': 'isHTTPS'
   }
}

Create a custom policy named isHTTPS.js in your api/policies folder to redirect HTTP requests to HTTPS.

  module.exports = function(req, res, next) {
    if (req.secure) {
        // Already using HTTPS; no action needed.
        next();
    } else {
        // Redirect to HTTPS.
        res.redirect('https://' + req.headers.host + req.url);
    }
};

In the config/bootstrap.js file, make changes to listen on port 80 for production environment and redirect requests to port 443 (SSL).

    var http = require( 'http' );
module.exports.bootstrap = function(cb) {
    //Listen on port 80 if environment is production
    if(sails.config.environment === "production") {
        http.createServer( sails.hooks.http.app ).listen( 80 );        
    }
    cb();
}

Answer 2

Update your local.js file or production.js file to include the path to your SSL Certificates.

    module.exports  = {
 ssl: {
     ca: require('fs').readFileSync(__dirname + '/ssl/ca.crt'),
     key: require('fs').readFileSync(__dirname + '/ssl/key.key'),
     cert: require('fs').readFileSync(__dirname + '/ssl/cert.crt')
   },
 port: 443
}

Include a policies section in your production environment configuration file.

    module.exports  = {
 ssl: {
     ca: require('fs').readFileSync(__dirname + '/ssl/ca.crt'),
     key: require('fs').readFileSync(__dirname + '/ssl/key.key'),
     cert: require('fs').readFileSync(__dirname + '/ssl/cert.crt')
   },
 port: 443,
 policies: {
    '*': 'isHTTPS'
   }
}

Create a custom policy named isHTTPS.js in your api/policies folder to redirect HTTP requests to HTTPS.

  module.exports = function(req, res, next) {
    if (req.secure) {
        // Already using HTTPS; no action needed.
        next();
    } else {
        // Redirect to HTTPS.
        res.redirect('https://' + req.headers.host + req.url);
    }
};

In the config/bootstrap.js file, make changes to listen on port 80 for production environment and redirect requests to port 443 (SSL).

    var http = require( 'http' );
module.exports.bootstrap = function(cb) {
    //Listen on port 80 if environment is production
    if(sails.config.environment === "production") {
        http.createServer( sails.hooks.http.app ).listen( 80 );        
    }
    cb();
}

Answer 3

Answer №2

To enable both http and https on Sails, I customized my configs/local.js file as follows:

var fs = require('fs');
var localSettings = ... // Add your default local.js settings here
if(require('optimist').argv.useHTTPS) {
    localSettings.express = {
        serverOptions : {
            key: fs.readFileSync('ssl/server.key'),
            cert: fs.readFileSync('ssl/server.crt')
        }
    };
    localSettings.port = 1338; // Use a different port than the default
}
module.exports = localSettings;

You will need to lift your Sails app twice. First run sails lift, then run sails lift --https.

This setup allows you to have both http and https servers running from the same codebase. While nginx is recommended for production environments, this workaround is suitable for local development without needing to install nginx.

Answer 4

To enable both http and https on Sails, I customized my configs/local.js file as follows:

var fs = require('fs');
var localSettings = ... // Add your default local.js settings here
if(require('optimist').argv.useHTTPS) {
    localSettings.express = {
        serverOptions : {
            key: fs.readFileSync('ssl/server.key'),
            cert: fs.readFileSync('ssl/server.crt')
        }
    };
    localSettings.port = 1338; // Use a different port than the default
}
module.exports = localSettings;

You will need to lift your Sails app twice. First run sails lift, then run sails lift --https.

This setup allows you to have both http and https servers running from the same codebase. While nginx is recommended for production environments, this workaround is suitable for local development without needing to install nginx.

Answer 5

Answer №3

For a setup with both HTTP and HTTPS without redirection:

To enable both HTTP and HTTPS, configure your SSL key, certificate, and HTTPS port in the /config/env/production.js file:

var fs = require( 'fs' );
module.exports = {
    port: 443,
    ssl: {
        key: fs.readFileSync( 'ssl_key.key' ),
        cert: fs.readFileSync( 'ssl_key.crt' )
    }
    //, ...
};

Next, set up a second HTTP server to listen on port 80 in the /config/bootstrap.js file:

var http = require( 'http' );
module.exports.bootstrap = function ( cb ) {
    // ...
    if ( process.env.NODE_ENV == 'production' )
        http.createServer( sails.hooks.http.app ).listen( 80 );
    // ...
};

Answer 6

For a setup with both HTTP and HTTPS without redirection:

To enable both HTTP and HTTPS, configure your SSL key, certificate, and HTTPS port in the /config/env/production.js file:

var fs = require( 'fs' );
module.exports = {
    port: 443,
    ssl: {
        key: fs.readFileSync( 'ssl_key.key' ),
        cert: fs.readFileSync( 'ssl_key.crt' )
    }
    //, ...
};

Next, set up a second HTTP server to listen on port 80 in the /config/bootstrap.js file:

var http = require( 'http' );
module.exports.bootstrap = function ( cb ) {
    // ...
    if ( process.env.NODE_ENV == 'production' )
        http.createServer( sails.hooks.http.app ).listen( 80 );
    // ...
};

Answer 7

Answer №4

After much contemplation, I finally found the perfect solution for running sailsjs on HTTPS.

To enable HTTPS, I placed the .crt and .key files into the ssl folder within my project directory.

I made adjustments to config/local.js to work with sailsjs 0.12.3 as shown below:


ssl: {
  key: require('fs').readFileSync(require('path').resolve(__dirname + '/ssl/mykey.key')),
  cert: require('fs').readFileSync(require('path').resolve(__dirname + '/ssl/mycert.crt'))
}

Answer 8

After much contemplation, I finally found the perfect solution for running sailsjs on HTTPS.

To enable HTTPS, I placed the .crt and .key files into the ssl folder within my project directory.

I made adjustments to config/local.js to work with sailsjs 0.12.3 as shown below:


ssl: {
  key: require('fs').readFileSync(require('path').resolve(__dirname + '/ssl/mykey.key')),
  cert: require('fs').readFileSync(require('path').resolve(__dirname + '/ssl/mycert.crt'))
}

Answer 9

Answer №5

Take a look at this: https://github.com/balderdashy/sails/issues/862

module.exports.bootstrap = function (cb) {
    var express = require("express"),
         app = express();

    app.get('*', function(req,res) {  
        res.redirect('https://' + req.headers.host + req.url)
    }).listen(80);

    cb();
};

For those using sails version 0.10.x, it might be necessary to transfer this code to module.exports.express (config/express.js). But, there's no certainty...

Answer 10

Take a look at this: https://github.com/balderdashy/sails/issues/862

module.exports.bootstrap = function (cb) {
    var express = require("express"),
         app = express();

    app.get('*', function(req,res) {  
        res.redirect('https://' + req.headers.host + req.url)
    }).listen(80);

    cb();
};

For those using sails version 0.10.x, it might be necessary to transfer this code to module.exports.express (config/express.js). But, there's no certainty...

Answer 11

Answer №6

When updating from version 0.9 to 0.10, it is important to note that the local.js file now requires the following setup:

ssl : {
key: fs.readFileSync(‘server.key’),
cert: fs.readFileSync(‘server.crt’)
}

This replaces the previous configuration in local.js:

express : {
    serverOptions : {
        key: fs.readFileSync('ssl/server.key'),
        cert: fs.readFileSync('ssl/server.crt')
    }
};

Answer 12

When updating from version 0.9 to 0.10, it is important to note that the local.js file now requires the following setup:

ssl : {
key: fs.readFileSync(‘server.key’),
cert: fs.readFileSync(‘server.crt’)
}

This replaces the previous configuration in local.js:

express : {
    serverOptions : {
        key: fs.readFileSync('ssl/server.key'),
        cert: fs.readFileSync('ssl/server.crt')
    }
};

Answer 13

Answer №7

It appears that implementing this feature directly in sails is not possible currently. Therefore, I decided to utilize nginx on the server and set up a redirect rule for HTTP to HTTPS.

Answer 14

It appears that implementing this feature directly in sails is not possible currently. Therefore, I decided to utilize nginx on the server and set up a redirect rule for HTTP to HTTPS.

Answer 15

Answer №8

It is crucial to manage both SSL and HTTPS when they share the same port through a proxy.

const express = require("express"),
     app = express();

app.get('*', function(req, res) {  

    if (req.isSocket) {           
        return res.redirect('wss://' + req.headers.host + req.url);
    }
    else {
        return res.redirect('https://' + req.headers.host + req.url);  
    }

}).listen(80);

Answer 16

It is crucial to manage both SSL and HTTPS when they share the same port through a proxy.

const express = require("express"),
     app = express();

app.get('*', function(req, res) {  

    if (req.isSocket) {           
        return res.redirect('wss://' + req.headers.host + req.url);
    }
    else {
        return res.redirect('https://' + req.headers.host + req.url);  
    }

}).listen(80);

Sails.JS: Harnessing the Power of Both HTTP and HTTPS

Answer №1

Answer №2

Answer №3

For a setup with both HTTP and HTTPS without redirection:

Answer №4

Answer №5

Answer №6

Answer №7

Answer №8

Similar questions

Error-free saving issue with Mongoose model in Node.js

"Encountering difficulty in retrieving information from $q and integrating it into the

Changing an image depending on the visibility of another image can be accomplished by using JavaScript to

"Encountered a syntax error while attempting to reference an attribute on an empty object

What is the process of transforming an array object into an object containing the same key

Unable to trigger @click event on nuxt-link component within Nuxt 3

Difference Between For Loop and Map Function

Encountering a TypeError when attempting to pass the onChange function as props to Grandchildren due to 'this' being undefined

Contrast the differences between arrays and inserting data into specific index positions

Gathering information from various collections in MongoDB to determine the population of mongoose

When querying with pgAdmin, values are displayed while Express JS may return null for a query result

How can I convert the date format from ngbDatepicker to a string in the onSubmit() function of a form

Angular.js testing for inject() function runs before the execution of a run phase code block

"How can we trigger a re-render of a React component once a promise is fulfilled? Is there a way to prevent rendering until the

Issue with Camera inversion not functioning properly in THREE.js with 1 Renderer and 2 Viewports

How can I modify an array in Couchbase by using an N1QL query?

Error: Order placement failed due to a validation error

Tips for ensuring only digits can be entered in a textbox on Firefox

Form appears outside the modal window

Tips for finding the index of distinct values in an array

Sails.JS: Harnessing the Power of Both HTTP and HTTPS

Answer №1

Answer №2

Answer №3

For a setup with both HTTP and HTTPS without redirection:

Answer №4

Answer №5

Answer №6

Answer №7

Answer №8

Similar questions

Error-free saving issue with Mongoose model in Node.js

"Encountering difficulty in retrieving information from $q and integrating it into the

Changing an image depending on the visibility of another image can be accomplished by using JavaScript to

"Encountered a syntax error while attempting to reference an attribute on an empty object

What is the process of transforming an array object into an object containing the same key

Unable to trigger @click event on nuxt-link component within Nuxt 3

Difference Between For Loop and Map Function

Encountering a TypeError when attempting to pass the onChange function as props to Grandchildren due to 'this' being undefined

Contrast the differences between arrays and inserting data into specific index positions

Gathering information from various collections in MongoDB to determine the population of mongoose

When querying with pgAdmin, values are displayed while Express JS may return null for a query result

How can I convert the date format from ngbDatepicker to a string in the onSubmit() function of a form

Angular.js testing for inject() function runs before the execution of a run phase code block

"How can we trigger a re-render of a React component once a promise is fulfilled? Is there a way to prevent rendering until the

Issue with Camera inversion not functioning properly in THREE.js with 1 Renderer and 2 Viewports

How can I modify an array in Couchbase by using an N1QL query?

Error: Order placement failed due to a validation error

Tips for ensuring only digits can be entered in a textbox on Firefox

Form appears outside the modal window

Tips for finding the *index* of distinct values in an array

Tips for finding the index of distinct values in an array